access-engine/docs/blocked-task-dependencies-2026-10-04.md

Blocked task review — 2026-10-04

Review scope: all nonterminal task blocks in access-engine workplans. Changes are confined to this repository and its State Hub projection. Owner source records were inspected read-only. This record establishes acceptance requirements; it records no new live approval, credential, identity or window.

Our task	Owner dependency and record	Required return / acceptance evidence
FLEX-WP-0031-T02	audit-core, accepted AUDIT-IN-0006	Exact sender rows for flex-auth.ops-warden, .tenant-engine, .user-engine, .secrets-engine, .informed-decision-t03, .informed-decision-sitting; may_write: true, may_read: false, tenants: ["*"] with the accepted deny-for-not-yet-created-tenant justification, load-bearing evidence kind, redact policy, four heartbeat classes at 86400s, and the source-owned wire cadence declaration. Return owning revision, registration references, token custody/mount references, and native acceptance status; prepared rows alone do not establish live admission. The new fetch pin needs separate admission if it is added to the emission rollout; the six-pin intake does not cover it.
FLEX-WP-0031-T02	gate-house, GH-WP-0004-T12 (todo in owner source)	A published decision disposing of FLEX-DEC-2026-018: deny/redact/not_applicable may leave after outbox failure while allow/audit_only are withheld. audit-core's accepted intake is not a statutory waiver. State whether the direction-limited exception is admitted, its declaration/detection conditions, or the required replacement semantics.
FLEX-WP-0031-T02 / T08	railiance-platform custody; ops-warden routing	AUDIT-IN-0006 names the attended OpenBao sender mint into platform/data/workloads/audit-core/senders, using the platform attended helper. Supply the governed lane and per-pin token mount/rotation references plus owner admission receipts; never send token values to Git, State Hub or chat. Before any credential request, run warden route find and warden route show as AGENTS.md requires. No credential request or mint was made by this review.
FLEX-WP-0031-T06	audit-core, reconciliation contract	Current audit_core/postgres_backend.py:event_counts and sqlite_backend.py:event_counts count accepted_at in [since, until). Our log has CommittedAt/OccurredAt. Ingest returns only status/reference, with no acceptance timestamp. Return an approved matching basis: counts by source event time, or stable per-event acceptance timestamps (including duplicates) that our sender can persist. Define bounds, clock/late-delivery handling, source/tenant scope and retry/crash treatment. Identical bounds alone cannot reconcile these two clocks; missing admission is not the only blocker.
FLEX-WP-0031-T08	operator, platform/network owners and audit-core observer	Approve exact immutable image, enabled pin/source, PVC size/node capacity, storage growth/retention, governed token mount and ingress/egress changes. Return native 202/duplicate-200 delivery, restart/cursor and lag evidence, plus an audit-core silence finding in a separately authorized non-production exercise. This review sets no test window or engagement. The optional chart and worker remain disabled on every pin.
FLEX-WP-ADHOC-2026-10-03-T02	operator decision 877c268b-2089-42f1-a811-d98f549c1cb2, ops-bridge, ops-warden WARDEN-WP-0039-T03	Decision is still open. Approve the exact CI digest and live install; record headroom/dry-run/rollout, Service IP and ops-bridge tunnel on 19091. ops-warden's unread return 26992e49 confirms fetch URL separation is implemented at 7d4381e/88c22d4; its task now needs configured policy.fetch_flex_auth_url, native health/allow/wrong-owner/fail-closed receipts. This is deployment acceptance, not missing evaluator code.
FLEX-WP-0020-T11	sbom-nexus, open SBOM-IN-0001	Owner receipt of the scheduled catch-up ingest: access-engine snapshot, frozen source SHA, repository UUID fda8ad85-a7d7-4055-8f21-902a533e59df. Owner source still shows open; elapsed time is not an ingest receipt. No manual production ingest was attempted.
FLEX-WP-0020-T11	secrets-engine; railiance-fabric	secrets-engine still has ../flex-auth in docs/exec-owner-binding.md:89; return the source-coordinate correction and existing handoff completion reference. railiance-fabric must return the owning residual record for its historical repo:flex-auth discovery node and explicitly state historical retention vs canonical mapping. No receiving task ID or completion is invented for either return.
FLEX-WP-0020-T11	operator decision e071b34e-c4d4-49d0-824d-2c58bb0ae496	Decision remains open. Name the soak bounds, observed deployment/decision/telemetry/package/automation evidence and residual owner receipts, then approve the exact obsolete checkout to remove. No soak success or cleanup is inferred. The protected flex-auth alias remains retained.

The three remaining root workplans are blocked, with task status wait and explicit dependency/human gates. Completed local work is not blocked on remote registration: FLEX-WP-0031-T05 now covers the implementation, T07 the optional PVC and profile validation, and T08 the remaining native delivery acceptance. T06 retains the valid-window comparator and native acceptance requirements.

FLEX-WP-0027 is finished on the original task scope. secrets-engine's terminal SECRETS-WP-0010-T03 and hashed native completion receipt establish human acceptance/consumption for the September 16 version-2 cycle, actor worsch. See evidence/2026-10-04-t03-owner-completion-review.json. The version-3 records now in access-engine are the separate IR-WP-0005-T02 cycle; consumed approvals cannot be replayed. The old open human decision remains recorded as history; this review does not answer a fresh human decision for the operator.

The whitehat return from this session also remains a gap: no recorded E2 tenant-A identity establishes absence of tenant-B authority. Reply ec96e1ba-27bd-4faa-8773-55ffeaba095c on thread bd8cf37e-80e8-4df9-9181-1441b31baa30 returns that gap as access-engine. E2 and ASM targets remain pending; terminal engagements were not reused and no test packet was sent. A real tenant-scoped identity/authority receipt must come from its identity/surface owner before access-engine can confirm it.